HydrogenAudio

Hosted Forums => foobar2000 => Support - (fb2k) => Topic started by: JDJGIncOfficial on 2021-11-07 01:40:22

Title: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-07 01:40:22
So mcafeee is flagging https://www.foobar2000.org/encoderpack
I have sent them the link to the program and they returned

McAfee Labs - Beaverton
Current Scan Engine Version:6100.8979
Current DAT Version:10160.0000
Thank you for your submission.

Analysis ID: 11080951

File Name            Findings                       Detection                    Type         Extra
--------------------|------------------------------|----------------------------|------------|-----
free_encoder_pack-20|current detection             |rdn/generic.dx              |Trojan      |no

current detection [free_encoder_pack-2021-01-26.exe]

   The file submitted is malware that can be detected with current DAT files. It is
recommended that you update your DAT and engine files and scan your computer again.

Note –

Due to the prevalence of network gateway AV products, it is important that all
submissions be zipped and the zip file password-protected (password - infected). Some
products will reject an email that contains a virus that is not sent in this way. In
addition, often we receive a file that appears not to have been infected, to find
later that the file was infected when it left the sender, and was cleaned somewhere
along the line.

Regards,



McAfee Labs


This is an issue as I can't use the encoder pack now...
Title: Re: Encoder pack False Positive.
Post by: kode54 on 2021-11-08 07:15:43
Maybe the encoder and app should stop using NSIS, since it's clearly the installer of choice for malware.
Title: Re: Encoder pack False Positive.
Post by: Porcus on 2021-11-08 10:22:15
So mcafeee is flagging

NSIS, since it's clearly the installer of choice for malware.

I find McAfee on the list at https://nsis.sourceforge.io/Users .

(That was not a rebuttal.)
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-09 03:44:52
Yeah mcafee itself was included with a different application, and I was curious why it did that, so mcafee is a bit of a hyprotic in this.
Title: Re: Encoder pack False Positive.
Post by: sveakul on 2021-11-09 04:41:07
This is an issue as I can't use the encoder pack now...
If your antivirus is preventing you from downloading this, here is a zipped version I extracted from the installer.  Unzip the contents to the foobar2000 "encoders" sub-folder (or create same if you never had it), letting it overwrite any existing content.  All credit to Case of course for this must-have package.
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-09 21:29:24
It still flagged it .___.
Why Mcafee?
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-09 21:34:44
https://www.virustotal.com/gui/file/fa2afe3d8566c02a917326d3c2452d5cd73cb5797b811891260c86790a3852ba?nocache=1
Title: Re: Encoder pack False Positive.
Post by: sveakul on 2021-11-09 23:05:16
It still flagged it .___.
Why Mcafee?
Your link shows that Mcafee has NOT flagged it, so you should be able to download that zip now no problem.  The fact that only 2 out of 61 vendors ("Kingsoft" and "MaxSecure") flagged it should not be a concern, as I would assume that ratio is par for the course for just about anything using compression.  Your other option would be to locate and download each encoder separately and 5 will get you 10 that at least one of those won't get a 100% pass at VirusTotal.
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-10 01:40:26
Okay Cool :D
Though, I really wish I could just run the installer without admin :(, and pick where it goes
Title: Re: Encoder pack False Positive.
Post by: sveakul on 2021-11-10 01:54:50
Okay Cool :D
Though, I really wish I could just run the installer without admin :(, and pick where it goes
Actually you can put the contents anywhere, as long as you point Foobar to the chosen location of the encoder.  You can do that in the "edit" window of the "Quick Convert" dialog, as below, using the "..." browse button in the marked box..  I recommend though that you put all the contents in one place to not break any file dependencies.

(https://i.imgur.com/egNKK7s.png)
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-10 02:52:05
I mainly want to just make it do it automatically, and not have to edit it manually to do it myself.
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-27 18:41:06
https://manual.audacityteam.org/man/faq_installing_the_lame_mp3_encoder.html
Lame is also now open source, so it can be put into foobar2000.
Title: Re: Encoder pack False Positive.
Post by: kode54 on 2021-11-27 21:45:37
LAME has always been Open Source, but until a year or a few years ago, it was encumbered by patents.
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-27 22:43:56
it appears to be built into audacity now.
Title: Re: Encoder pack False Positive.
Post by: marc2k3 on 2021-11-27 22:48:16
The main link in your first post already tells you that LAME is bundled with the encoder pack.

https://www.foobar2000.org/encoderpack

It's not exactly new news either...

(https://i.imgur.com/KhLMSfq.png)
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2021-11-27 23:50:13
I am saying it can just be built into foobar2000, than being built into the encoder pack.
Title: Re: Encoder pack False Positive.
Post by: kode54 on 2021-11-29 06:52:31
foobar2000 doesn't build in any encoders. And it probably won't, either. If you want a version that requires the encoders to be compiled into plugins, please see: version 0.8.3. I hear it also works on Windows 9x.
Title: Re: Encoder pack False Positive.
Post by: JDJGIncOfficial on 2022-04-21 01:58:25
Is there a way that we could get a normal portable bundle install of the foobar2000 encoder pack?